$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft File: k524p4YADCa65IN7bs2uD4q60bA.mft (raw, json) Hash identifier: ubiwHGRN8Cymb5AsJu2tzpbW8C4F75/hUYcMoiGQriI= Subject key identifier: 2B:FE:E0:CE:CF:23:54:A1:40:6F:DC:EC:44:A3:DA:6F:CB:59:00:9A Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 Certificate issuer: /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Certificate serial: 18F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft Manifest number: 18D9 Signing time: Sun 10 Aug 2025 16:26:17 +0000 Manifest this update: Sun 10 Aug 2025 16:26:16 +0000 Manifest next update: Sun 17 Aug 2025 16:26:16 +0000 Files and hashes: 1: k524p4YADCa65IN7bs2uD4q60bA.crl (hash: pEwDRoVsSaaQ3pqyOrTRy046CiyPaxeynXUlnJgEU84=) 2: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (hash: dkIdUkxS0d2PbrqHHzMK0XKv4nvJXGsXU3jrSo/hWKk=) 3: A6ACA298858911E88026B416C4F9AE02.roa (hash: Bm6Hg3gh1j1a80wR2XX7xwyi1WY27Wumi8LE07BcSR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6391 (0x18f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Validity Not Before: Aug 10 16:26:16 2025 GMT Not After : Aug 17 16:26:16 2025 GMT Subject: CN=6898c828-f40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:84:11:96:3b:d9:af:ed:e5:6d:96:75:4e:11: 29:57:00:5c:1e:e9:e4:01:f6:52:86:db:58:7d:b2: dc:5a:43:a9:5d:26:ec:18:ee:65:16:c4:2a:c7:f0: 7e:a9:c5:57:b3:17:28:0b:20:f9:d8:df:54:9d:88: 1c:6c:38:31:e9:50:ef:3e:34:83:84:a3:ff:39:4d: 0f:bc:c5:48:33:18:b0:ae:e7:e4:d3:91:8f:22:3e: e6:78:dd:6f:33:af:67:6a:1e:b4:e8:34:61:b4:cc: bb:95:43:03:e9:8d:ca:9e:fe:9c:cf:94:50:1f:3d: f3:de:b0:b1:20:4f:e1:5e:06:67:13:30:42:51:d9: 24:8d:a9:42:1d:2e:82:3c:60:9f:e6:65:6b:75:e1: 82:ee:a0:c4:db:a3:df:e3:1c:d1:a4:5a:6a:bc:bb: aa:0f:27:e2:bf:ac:4b:13:7d:53:c6:b9:da:4a:75: 28:cc:d6:ad:2e:f4:45:86:fe:de:b7:e7:00:50:89: b2:66:05:73:5a:b5:f9:9a:f0:cb:d9:80:93:a7:3c: 60:04:8d:39:cb:1b:da:ab:dc:4e:7a:47:88:ae:3a: 59:7c:ed:75:50:61:92:7a:23:fd:8e:4e:83:c4:96: 6e:02:0d:6c:f8:5c:de:5d:aa:81:52:d9:bb:60:a6: bb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:FE:E0:CE:CF:23:54:A1:40:6F:DC:EC:44:A3:DA:6F:CB:59:00:9A X509v3 Authority Key Identifier: keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:95:6a:d1:db:1e:24:3e:9c:e3:5e:38:0e:fb:08:ad:32:8b: 45:e1:f2:35:16:1b:53:ae:72:3a:44:fb:db:bf:0b:b0:2e:63: 55:8e:92:7c:ea:7c:15:fe:06:37:17:1a:c1:1e:b9:9b:84:63: bd:4c:4e:36:b9:bd:4a:e2:e6:bb:e0:80:3c:84:13:93:45:0c: f2:5e:0b:cf:a0:6d:be:b1:8a:10:73:7c:a1:ca:fc:60:5e:94: 6a:96:e8:62:45:57:3f:51:5a:6a:12:9a:74:40:c4:1c:03:1f: a1:98:c8:7d:b4:1b:98:12:60:d9:e3:28:33:f0:59:6c:40:ad: 39:99:ba:02:bb:8b:de:21:85:33:5f:43:02:59:17:a7:62:b8: 21:1e:8e:3f:b5:c2:4c:39:b6:c1:e4:fd:34:49:68:da:b6:a1: d4:18:cf:3d:c9:56:66:70:76:c4:91:bd:7d:e5:51:1c:48:60: 44:76:d3:1f:0c:eb:6a:0e:20:6b:a8:8e:0e:c7:be:af:40:27: eb:8e:a7:5d:cd:1a:77:37:44:3a:73:ca:3f:11:24:23:62:24: f7:17:61:41:d2:2e:04:68:cf:1a:3e:75:f8:6d:af:c0:e4:36: fb:40:3b:bb:70:f8:93:35:96:93:25:65:3e:7b:f3:0c:fa:11: b1:ab:a5:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFQjMxMTAvBgNVBAUTKDkzOURCOEE3ODYwMDBDMjZCQUU0ODM3QjZFQ0RBRTBG OEFCQUQxQjAwHhcNMjUwODEwMTYyNjE2WhcNMjUwODE3MTYyNjE2WjAYMRYwFAYD VQQDEw02ODk4YzgyOC1mNDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4QRljvZr+3lbZZ1ThEpVwBcHunkAfZShttYfbLcWkOpXSbsGO5lFsQqx/B+ qcVXsxcoCyD52N9UnYgcbDgx6VDvPjSDhKP/OU0PvMVIMxiwrufk05GPIj7meN1v M69nah606DRhtMy7lUMD6Y3Knv6cz5RQHz3z3rCxIE/hXgZnEzBCUdkkjalCHS6C PGCf5mVrdeGC7qDE26Pf4xzRpFpqvLuqDyfiv6xLE31TxrnaSnUozNatLvRFhv7e t+cAUImyZgVzWrX5mvDL2YCTpzxgBI05yxvaq9xOekeIrjpZfO11UGGSeiP9jk6D xJZuAg1s+FzeXaqBUtm7YKa7aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCv+4M7P I1ShQG/c7ESj2m/LWQCaMB8GA1UdIwQYMBaAFJOduKeGAAwmuuSDe27Nrg+KutGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREVCMy81RDczNUQ0Njk2 REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURDYTY1SU43YnMydUQ0cTYw YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s1MjRwNFlBRENhNjVJTjdiczJ1RDRxNjBiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REVCMy81RDczNUQ0Njk2REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURD YTY1SU43YnMydUQ0cTYwYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzlWrR2x4kPpzjXjgO+witMotF4fI1FhtTrnI6RPvbvwuwLmNVjpJ8 6nwV/gY3FxrBHrmbhGO9TE42ub1K4ua74IA8hBOTRQzyXgvPoG2+sYoQc3yhyvxg XpRqluhiRVc/UVpqEpp0QMQcAx+hmMh9tBuYEmDZ4ygz8FlsQK05mboCu4veIYUz X0MCWRenYrghHo4/tcJMObbB5P00SWjatqHUGM89yVZmcHbEkb195VEcSGBEdtMf DOtqDiBrqI4Ox76vQCfrjqddzRp3N0Q6c8o/ESQjYiT3F2FB0i4EaM8aPnX4ba/A 5Db7QDu7cPiTNZaTJWU+e/MM+hGxq6UQ -----END CERTIFICATE-----Generated at Mon Aug 11 04:19:23 2025 by rpki-client